Who this policy covers
This policy explains personal information processed through Bookly, a booking platform based in Lagos, Nigeria. For privacy questions or requests, email [email protected]. The business you book with also handles information to deliver its service and may have its own privacy notice. This policy is written with the Nigeria Data Protection Act 2023 in view.
Information you provide
Depending on the feature you use, we process account names, email addresses, phone numbers, passwords in hashed form, business profiles, staff records, service listings, appointment details, messages, and payment references or evidence submitted for verification. Do not include unnecessary medical, identity or other sensitive information in booking notes or payment evidence.
Technical information
Bookly uses essential session and security cookies, country-based currency preferences and operational logs. Logs may include IP addresses, request metadata and errors needed to operate and protect the service. Optional Google Analytics follows the consent choices described below. Social sign-in and embedded media involve their selected providers when used.
Why information is used
Information is used to create accounts, publish business listings, calculate and schedule appointments, process and verify payments, deliver requested notifications, handle support and disputes, prevent fraud and comply with legal obligations. Depending on the purpose, lawful bases may include performing a contract, a legal obligation, legitimate interests assessed against your rights, or consent where required. Withdrawing consent does not undo earlier lawful processing.
Payment information
Payment providers handle payment credentials under their own terms and privacy notices. Bookly stores booking amounts, currency, payment status, transaction references and verification records. Bookly does not ask you to send full card numbers or banking passwords by email. A manual payment reference or proof may be visible to an authorized reviewer.
Who receives information
The business and authorized staff receive information necessary for your appointment. Relevant payment, hosting, email or messaging providers process information needed for the enabled service. Information may be disclosed where legally required, to address fraud or a dispute, or as part of a lawful organizational transfer subject to appropriate safeguards. We do not sell personal information as a platform feature.
International processing
Hosting, payment or communication providers may process information outside Nigeria. Applicable transfer requirements and safeguards must be assessed for the providers in use. You may ask [email protected] about the relevant processing arrangements. This notice does not claim that every provider stores data in Nigeria.
Retention and security
Records are retained for as long as needed for the service, accounting, security, dispute handling and applicable legal duties. Retention depends on the record and circumstances; some transaction records may need to be kept after account closure. Access controls, password hashing, payment checks and other safeguards help protect information, but no system can promise absolute security. Report a suspected incident promptly.
Your choices and rights
Subject to applicable conditions and exceptions, you may request information about processing, access, correction, erasure, restriction, objection or portability, and withdraw consent where processing relies on it. You may ask for human review where applicable to automated decisions. We may verify identity to protect your information. Send requests to [email protected]; do not send passwords or full card details.
Complaints and children
You may complain to the Nigeria Data Protection Commission at ndpc.gov.ng. Contacting Bookly first can help us investigate but does not remove that right. The platform is not intended for unsupervised use by children; a parent, guardian and the service provider should handle bookings involving children as appropriate.
Cookies and changes
See the Cookie Policy for session and optional tracking information. Changes to this notice will be published here. For the actual contact, retention, provider and business arrangements in use, contact [email protected].
Receipts, booking messages and WhatsApp
Payment receipts and booking records are private to the customer, authorised business reviewers and authorised Bookly administrators. Email review links require the correct account; receipts are not public portfolio files. Booking, payment, rescheduling and service messages may be sent to the customer and business to operate the appointment. Choosing the WhatsApp button opens a prepared booking message for you to review and send; it is not sent automatically by that button. Do not include card credentials or unnecessary sensitive information.
QR banners and optional holiday flyers
A QR banner uses the public business name, logo, theme colour and booking link. Downloaded artwork can be shared publicly by its owner and should not contain private customer information. Eligible paid owners who enable holiday emails may receive personalised seasonal flyers before Christmas and New Year. Ordinary workspaces do not display the private administrator holiday preview. Marketing preferences can be changed without disabling essential booking and security notices.
Subscription profiles and optional greetings
Business owners provide their name, contact phone, street address, city and country before starting a new Bookly subscription checkout. These private, self-reported details support subscription account records; they are not document-based identity verification and are not displayed on the public company website. Do not submit identity documents or bank credentials through this form.
Date of birth, address line 2, state or region, and postal code are optional. Date of birth is used only to schedule an annual birthday greeting when the owner opts in. Greetings do not include the birth year. Birthday and important holiday emails have separate optional choices in Subscription profile. Holiday greetings may include a subscription offer only when an administrator has explicitly configured it. Declining greeting emails does not affect bookings, subscriptions or essential account notices.
Owners can correct their private details and change email choices from their dashboard. Administrators can correct owner account details and private profiles, or revoke greeting permission; they cannot grant email consent on an owner’s behalf. Greeting messages include a signed unsubscribe link with a confirmation step. Unsubscribing stops birthday and holiday greetings, including their promotional offers; essential booking, security and expiry notices remain enabled. Contact support for help correcting or removing account information.
Manage subscription profile and greeting preferences · Contact Bookly support
Careers and applications
Bookly Careers lists current opportunities and their compensation terms. Each vacancy states its compensation terms. The initial founding roles have no starting salary and offer equity-based participation subject to a separate written agreement. Applying is not an employment, consulting or shareholder agreement, and there is no application fee.
Applicants provide their name, email, relevant experience, motivation, availability and optional phone and HTTPS work links. No identity document, date of birth, bank detail or file upload is required. Applications are stored privately for platform hiring administrators to review and contact applicants about the relevant opportunity. Application information is not used to subscribe applicants to business-owner marketing. There is no automated hiring score or selection decision.
Applications are recorded before email notifications are attempted. A notification delay does not remove the private application record. One application per email and vacancy is recorded each UTC day; a repeat on that day returns the existing reference. To request a correction or discuss removal, contact Bookly support with the application reference and email address. Administrators review status and notes internally; those changes do not automatically send a decision email. External work links are provided by applicants and are not automatically fetched or verified by Bookly.
Currency preferences and local country detection
Bookly uses a local DB-IP country database or trusted server country information to estimate a display currency. Visitor IP addresses are processed on Bookly’s server for this lookup and are not sent to a third-party geolocation API. A manually selected currency is stored in the session and a preference cookie for up to one year. Country estimates can be inaccurate; visitors can choose another currency. Public exchange-rate tables are fetched by Bookly’s server without sending customer names, bookings, wallet secrets or payment details.
Cryptocurrency payment records
For crypto subscriptions, Bookly records the account and invoice reference, fiat and crypto amounts, receiving address, selected asset/network, transaction hash and confirmation status for payment verification, billing and support. Blockonomics receives the wallet and public transaction details needed to monitor and confirm payment. Blockchain transaction information is public and can remain available independently of Bookly.
A compatible wallet may be connected through Blockonomics’ Web3 component for USDT. Its connection and transfer prompts are handled by the wallet/provider. Bookly does not receive wallet seed phrases or private signing keys and does not sign or automatically renew crypto payments on an owner’s behalf. Subscription crypto invoice details are private to the account owner and full platform administrators. For customer bookings and store orders, Bookly records the customer and business references, fiat and cryptocurrency amounts, receiving address, transaction hash and verification status. Payment details are accessible only within the relevant customer or business context. Businesses supply their own encrypted Blockonomics API credentials and receiving wallets; the provider receives the public payment details needed to monitor those transactions. Bookly does not receive the business’s customer funds. Read Blockonomics privacy and terms or contact [email protected] about Bookly records.
Public website media
Public company images, logos, galleries and the public business guide may be delivered through Cloudflare R2 and media.bookly.ac. Only files selected for public website display are copied there. Private booking receipts, payment proofs, identity documents and account files remain in access-controlled storage. Local originals may be retained for recovery. Public images can be cached by visitors and content delivery networks.
Optional Google Analytics
With your permission, Bookly uses Google Analytics 4 to understand visits to public marketing pages and aggregate business-profile visits. Google receives technical information such as IP address and browser/device details when its script connects, along with a pseudonymous analytics identifier and the public page category. Our integration excludes account, login, booking, checkout and receipt pages, removes page queries and fragments, and reports business profiles as one generic category. We do not send customer names, email addresses, booking details or payment information to Analytics.
Analytics does not load until you choose Accept analytics. Decline keeps it off. Use Privacy choices on public pages to change your choice or withdraw; withdrawal disables further collection in that browser and clears Bookly analytics cookies. Your choice is stored locally for up to 180 days; analytics cookies are configured for up to 180 days. Advertising features are disabled. Google may process data outside your country. How Google uses information from sites that use its services. Contact [email protected] with privacy questions.
[email protected] · Lagos, Nigeria